Case Report – Court affirms Anton Piller in departing employee case

On May 5th, the Alberta Court of Queen’s Bench for affirmed an Anton Piller order that permitted a search of business premises and private residences and seizure of materials and information related to a departing employee claim.

There is a three-part test for the making of an Anton Piller order: (1) there must be an extremely strong prima facie case; (2) the potential or actual damage to the applicant must be very serious; and (3) clear evidence that the defendants have incriminating evidence in their possession and that there is a real possibility they may destroy such material.

The Court examined the mixed jurisprudence on the “serious harm” element and held that it requires proof of procedural rather than financial harm. That is, an applicant must demonstrate that its proposed order will preserve evidence without which it could not prove its case. The Court reasoned that the purpose of the extraordinary order is to preserve evidence and that irreparable financial harm can be addressed through an ordinary injunction:

As discussed, the adverse financial impact approach considers potential harm that may be visited upon the plaintiff as a result of the use of the proprietary or confidential information that the defendant has or may have in its possession. If this is the type of damage that the plaintiff seeks to enjoin, then an injunction may suffice without the need for the court to exercise the extraordinary power of granting an Anton Piller Order. As noted by Hoffmann J. in 1268 Lock International Plc. v. Beswick and Others, [1989] 1 W.L.R. 1268 at 1281, Anton Piller orders reside at the “absolute extremity of the court’s powers”. For that reason, they should only be granted in circumstances which demand their imposition. Those circumstances would have to include more than the desire to enjoin certain activities which could be accomplished through much less intrusive methods. They must include a need to preserve evidence without which the plaintiff’s claim could not be proven.

The Court held that the applicant met its burden of proving serious harm even though it had copies of the information taken and (presumably) evidence showing it was taken. The Court suggested that the applicant would also need forensic evidence about how its information was stored and maintained on the defendants’ computers to prove misuse of confidential information: “[Making out its case] would include showing where the information was taken and how it was used or altered.”

The Court also engaged in a detailed analysis of the evidence to determine whether the applicant had established a “real possibility” of destruction based on a “compelling inference.” There is a policy lesson in this part of the judgement for employers who are likely to be faced with claims by departing employees who take electronically-stored confidential information and claim they deleted it because they realized that taking it was wrong. In the face of such a defence, the Court drew an inference that destruction of evidence was a possibility based partly on the applicant’s good information management practices. It said:

I am satisfied that on all of the circumstances in relation to this point there is a basis upon which to draw a strong inference of dishonesty. Particularly compelling is the fact that Higham took the documents in the face of his supervisor’s warning and an employment agreement he executed prohibiting him from copying or transmitting “[a]ll notes, records, working papers, files, research material or literature accumulated or developed” while at CCS…

Secure argued that the e-mails Higham deleted and the CD-Rom he destroyed was not “evidence” when it was destroyed because there was no Statement of Claim yet issued or because the litigation had not yet commenced. Belzil J. in Netsmart considered the destruction of documents before litigation had commenced in relation to this arm of the test. In any event, Higham knew he was in possession of documents that he should not have had and he chose to destroy them. Even if the destruction was in good faith as he claims, a point upon which I make no finding, it does not mitigate the risk of his destroying further CCS documents in his possession. In other words, he was given to destroying documents that were improperly in his possession. Regardless of his motives the fact that he did this at least twice indicates that it may well happen again. As stated by Richard A.C.J. in Adobe, at para 89: “It cannot now be argued that the plaintiffs should be denied an Anton Piller type order preserving evidence when that evidence was in fact destroyed.”

While this passage highlights the applicant’s good information management practices, the applicant also suffered for agreeing to give another of its departing employees his work laptop in return for a promise to make a charitable donation and then failing to wipe the laptop when requested by the employee. The Court held that it could not draw any negative inference from the employee’s deletion of over 4,000 e-mails in these circumstances because the this action was consistent with the actions of an honest employee who wanted to rid himself of his employer’s e-mails. As a result, the Court revised the order to exclude the laptop.

The plaintiff brought a cross-motion to deal with the scope and form of production of information from a number of seized hard drives. The award discusses the protcol by which the parties will deal with production but is not very directive as it appears they were in substantial agreement on how to proceed.

CCS Corp. v. Secure Energey Services Inc., 2009 ABQB 275 (CanLII).

Case Report – Strong words on employers’ interest in controlling employee computer use by the Alberta C.A.

The Alberta Court of Appeal’s June 22nd judgement in Poliquin v. Devon Canada Corporation is not a privacy judgement, but contains some very strong dicta supporting employers’ interest in controlling employee use of their computer systems.

The case is about an employer that terminated a long-service supervisor for, among other things, sending and receiving pornographic and racist e-mails. In holding the employee’s wrongful dismissal claim ought to be dismissed summarily, the Court of Appeal made the following remarks:

It is important to situate a document like the Code of Conduct in the larger workplace context. Employers have the right to set the ethical, professional and operational standards for their workplaces. Doing so not only falls within an employer’s management rights, it also constitutes an integral component of corporate good governance. The workplace is not an employee’s home; and employees have no reasonable expectation of privacy in their workplace computers. It therefore follows that while employers may permit employees limited personal use of workplace computers, the employer is entitled to restrict the terms and conditions on which that use may be permitted. Devon did just that. Employees are permitted to use Devon’s equipment “for limited personal use”, but such use must be in compliance with the Code of Conduct: App. Key Evidence, Vol. 1, A83. The Code of Conduct expressly provides that prohibited use of e-mail includes “[s]ending…pornographic, obscene, inappropriate or other objectionable messages or attachments via e-mail to anyone”: App. Key Evidence, Vol. 1, A83. Further, harassment is defined under the Code of Conduct as including “[v]isual conduct such as pornographic or derogatory…e-mails…”: App. Key Evidence, Vol. 1, A80.

Employers have good reason to be concerned about the misuse of their equipment and resources in order to access, receive and disseminate pornographic or racist material. The potential for harm to an organization flowing from this kind of misconduct is great. It can easily poison a work environment, thereby denying equal employment opportunities to others: Backman v. Maritime Paper Products Ltd., 2008 NBQB 219 (CanLII), 2008 NBQB 219, 67 C.C.E.L. (3d) 261 at paras. 9-11. Since work is an essential aspect of an individual’s personal life, an employer owes obligations to all employees in its organization. It cannot turn a blind eye to discrimination or harassment in its workplace: Menagh v. Hamilton (City), [2005] O.T.C. 898 at paras. 46 & 287 (S.C.J.), aff’d 2007 ONCA 244 (CanLII), 2007 ONCA 244. As the Ontario Court of Appeal recognized in Gonsalves v. Catholic Church Extension Society of Canada 1998 CanLII 7152 (ON C.A.), (1998), 164 D.L.R. (4th) 339 at para. 10, 39 C.C.E.L. (2d) 104, an employer “has a duty to all the employees both to end the [sexual harassment] and to alleviate its impact upon the employment environment.” See also Tellier v. Bank of Montreal reflex, (1987), 17 C.C.E.L. 1 at 12 (Ont. Dist. Ct.), where the Court recognized that an employer has “a heavy responsibility to protect its employees.”

If an employer fails to act, it faces a significant risk of actions by employees who are subjected to discrimination or harassment – and properly so: see for example Robichaud v. Canada (Treasury Board), 1987 CanLII 73 (S.C.C.), [1987] 2 S.C.R. 84 , 40 D.L.R. (4th) 577; Janzen v. Platy Enterprises Ltd., 1989 CanLII 97 (S.C.C.), [1989] 1 S.C.R. 1252, 59 D.L.R. (4th) 352; Bannister v. General Motors of Canada Ltd. 1998 CanLII 7151 (ON C.A.), (1998), 164 D.L.R. (4th) 325 at para. 20, 39 C.C.E.L. (2d) 91 (Ont. C.A.); and Tellier at p. 12. Therefore, employers are fully justified in taking proactive steps, including the adoption of codes of conduct, to curtail and prevent improper conduct.

There are other negative consequences an employer may suffer when an employee misuses its equipment and resources for pornographic or racist purposes. The reputation of an employer in the business and wider community can be seriously compromised when even one employee engages in this kind of behaviour, particularly where that employee holds a senior supervisory position. It can also adversely impact on the work – and work ethic – of the employee in question given the very real risk that the misuse will occur in whole or in part on the employer’s time. And then there is the threat to a company’s information technology systems. Computer operating systems can be infected with worms and viruses introduced through inappropriate accessing of pornographic and racist websites or through receiving tainted material downloaded from these websites. In addition to these concerns, this kind of misconduct increases the risk that other ethical and professional boundaries will, by reason of the employer’s perceived tolerance of the original misconduct, be more readily crossed, not only by the affected employee, but by others within the organization, or even perhaps outside it (like suppliers to a company).

In summary, an employee’s misuse of a workplace computer for pornographic or racist purposes negatively affects an employer’s professional, ethical and operational integrity. Employers are not required to tolerate the misuse of their computers and Internet access any more than they are required to put up with serious incidents of dishonesty by employees. When an employee steals money from an employer, the theft and resulting damage is at least confined to that employee. But where dissemination of pornographic or racist material using the employer’s computer or Internet access is concerned and especially where the employee’s e-mail address includes the employer’s identity, this is not necessarily so. In the information technology world today, e-mail can be disseminated to many inside and outside an organization with the click of a mouse. Accordingly, the harm done may well be far more serious and pervasive. This reality substantially increases the risks to employers flowing from the misuse of their equipment and Internet access for improper purposes. For these reasons, an employer is entitled not only to prohibit use of its equipment and systems for pornographic or racist purposes but also to monitor an employee’s use of the employer’s equipment and resources to ensure compliance.

Please forgive the lengthy quote, but it is a fairly powerful excerpt and handy to us management lawyers.

For Michael Fitzgibbon’s excellent discussion of Poliquin and the availability of summary judgement in wrongful dismissal cases, see here.

Poliquin v. Devon Canada Corp., 2009 ABCA 216.

Information Roundup – 22 June 2009

Here are the links I’ve tweeted since the last Roundup:

Been going very hard lately. I think summer is supposed to be a time for a little catch up, but I probably agreed to take on a few too many speaking engagements and had a couple of big matters to handle at the same time. I do find getting out and speaking a good way of learning though, and I have no regrets about my last month in that regard.

On the personal front, we’re expecting our second child very shortly. It’s about time, because Hugo (below) seems two going on ten. I just talk to him like an adult now, ’cause he seems to understand everything. Big vocabulary too – good words and bad!

The baby’s due just after Canada Day, and I’m heading out solo to our friends Dave and Janie’s wedding on Cape Breton island that weekend. A certain disaster waiting to happen, but rushing back to TO could also make for a good story. We’ve never been good at keeping things simple!

Take care and enjoy the links!

Dan

untitled2

danmichaluk

  1. Port and Popsicles on the back porch. So good an experience I should sell tickets!

  2. Liked Mike Fitzgibbon’s Summary Judgement in Employment Disputes: http://bit.ly/PHB7y

  3. Thank you for the RT@MAllinotte!

  4. RT @slaw_dot_ca New post on Slaw: The Justice Reporter http://tinyurl.com/lqy4fn Printed a copy for review. Looks good.

  5. Supremely secret: top [Canadian] court wants law clerks muzzled: http://bit.ly/YhW8J Not a hard find, but interesting.

  6. Interesting case on ER vicarious liability for EE privacy misdeed: http://tinyurl.com/lcqs3g Via @privacylaw

  7. Nice day in TO. Morning at Riverdale farm and then a paddle out around Leslie Spit.

  8. Good TO Portlands experience this am. Windsurf sesh followed by splash in the pool at Mayfair. Feeling human now.

  9. Reading The Court’s Privacy is Dead post: http://bit.ly/13d1Ee

  10. “Crown brief” production judgement by the BCCA: http://bit.ly/cxmdV [Still unpacking this, but have recorded the essence.]

  11. Congrats! RT @wenlib Trying to focus – too excited about the new job. I’m going to be the Manager of client services at the Leg Library…

  12. @privacylawyer Yes, we’re getting lots of mileage out of it. Can’t wait to hear your views over a beer some day…no tape recorder present!

  13. John Gregory pushes back on my comment on the scope of privacy rights and Raitt at @slaw_dot_com: http://bit.ly/flBni

  14. @erikmagraken on today’s Crown brief production case from the BCCA: http://tinyurl.com/lcqs3g Thx Erik!

  15. @dominicjaar Nice gig, I’d say!

  16. Commented on the @a_cameron post on the Raitt tape case @slaw_dot_ca: http://bit.ly/flBni

  17. Thanks @pensionlawyer and @sectorprivate. Further developed thoughts (sort of) here: http://bit.ly/t0BDG

  18. Privacy guy’s awesome digest is up: http://bit.ly/IKKYh

  19. And on a more serious note, great OBA dinner on search and seizure. Prof Austen drew an nice link between R. v. Patrick and Internet privacy

  20. @beermile Very flattered by the comparison to Bobby Riggs, but your assumption about my fitness level might be too generous!

  21. Thank you @smireau and @helply. Here’s the privacy wheel, posted by @privacynow from down under:http://twitpic.com/4b0f1

  22. I recall following someone who created this great “privacy wheel,” an internal communication/training aid. Can you help me find it?

  23. Decided to attend this OBA dinner program on search and seizure tonight. Looks good. If you’re in TO, check it out: http://bit.ly/2loDMz

  24. RT @beermile Beermile.com just surpassed 10,000 entries. (via @doctorfantastic)

  25. Thanks for this (on U. Illinois admissions suit) @PrivacyLawhttp://tinyurl.com/l5hkdu

  26. Reminded of this timeless article in an firm project. Forget the Windup and Make the Pitch: http://bit.ly/mnPHV

  27. Added short addendum to Ontario IPC personal e-mails case: http://bit.ly/w4sTA

  28. Tandem appeals in Prime Minister’s agenda book matter come in against public access: http://bit.ly/kkKEu

  29. Paddleboarders prepared to pack it on: http://bit.ly/14fVSH

  30. Final argument in big matter (for me) today. Exhausted. Fulfilled.

  31. Student appeals and higher education student affairs issues: http://bit.ly/i2agF Good presentation/discussion this morn. Materials here.

  32. Like a couple from the @eschaeff “at the blogs” including the one from @AdamsDrafting on bad words in contracts. http://bit.ly/1pWMAa

  33. Got it! http://www.facebook.com/dan…

  34. Case Report – Raitt “lost recorder” judgement published: http://bit.ly/t0BDG [Leading the way for bizarre privacy case of the year!]

  35. Thanks for the FF @erikmagraken, @omarharedeye, @berskinparr and @sectorprivate. Enjoy your weekends!

  36. #followfriday @jordan_law21 for the free advice on the use of “wither” and “whither.” Thanks again Jordan!

  37. The CBA has published its new Privacy Pages newsletter: http://bit.ly/m6d70

  38. RT @RalphLosey Supreme Court Won’t Hear Case Over Computer Tech’s Right To Search Your Computer http://bit.ly/CUxXa

  39. Off to Rethink Breast Cancer’s “Romp”. Should be fun!

  40. Posted e-mail law presentation here: http://bit.ly/adTfs Found today very useful. Good presentation by @a_cameron and others!

Case Report – “Crown brief” production judgement by the BCCA

Yesterday, the British Columbia Court of Appeal allowed an appeal of an order that required the Vancouver Police Department to produce records that had become part of the Crown’s brief in a ongoing prosecution.

The plaintiff is the father of a man who was struck and killed by a motor vehicle in a hit and run. The defendant is the man charged criminally for the hit and run. The defendant’s criminal trial has been adjourned and will re-commence later this year. In the civil action, he did not produce to the plaintiff the materials he received from the Crown in its disclosure. This led the plaintiff to apply for third-party production from the police. The Crown then objected, claiming litigation privilege and public interest immunity.

The Supreme Court ordered production last December. It ordered production of records as a class (the class of all records produced in the criminal matter) from the Vancouver Police Department subject to an objection by the Crown to the production of any specific documents. The Crown objected to this process and argued for a process more like that endorsed by the Ontario Court of Appeal in D.P. v. Wagg – that is, one in which the protected status of the documents is presumed subject to an application to be brought by the party seeking production.

The Court of Appeal accepted the Crown’s argument, allowed the appeal and endorsed a rather complex form of order that contemplates a police inspection, a police decision on production and privilege, recovery of costs incurred by the police and court supervision of the police decision on production and privilege.

See here for Erik Magraken’s summary of the case.

Wong v. Antunes, 2009 BCCA 278.

Case Report – Federal Court of Appeal confirms ministerial offices beyond the scope of ATIA requests

In an oral judgement issue on May 27th, the Federal Court of Appeal dismissed the Information Commissioner of Canada’s appeal of Justice Kelen’s June 2008 finding that the Prime Minister’s Office and other ministerial offices are not “institutions” whose records are subject to the Access to Information Act.

Justice Kelen had also found that some information in former Prime Minister Chretien’s agenda book in the control of the Privy Council Office and the Royal Canadian Mounted Police was not exempt from public access as his personal information. On May 29th, the Federal Court of Appeal allowed an RCMP appeal of this finding. The Court of Appeal held the Prime Minister is not an officer of the Privy Council Office whose job-related information excluded from the definition of personal information by section 3(j) of the ATIA.

Both of the Court of Appeal judgements turn on a finding that the ATIA was drafted on the basis of a well understood convention that the Prime Minister’s Office is separate from the Privy Council Office and the offices of Minsters are seaprate from the departmetns over which ministers preside.

My detailed summary of Justice Kelen’s judgement is here.

Canada (Information Commissioner) v. Canada (Minister of National Defence), 2009 FCA 175.

Canada (Royal Canadian Mounted Police) v. Canada (Information Commissioner), 2009 FCA 181.


CAISJA presentation on student appeals and related higher education student affairs issues

I had a great time this morning at pre-conference workshop for the annual Canadian Association of College and University Student Services conference. The workshop was organized by the new CACUSS academic integrity and student judicial affairs division – CAISJA. I love addressing professionals working in the higher education sector because attendees are always very knowledgeable and engaged. Today was no exception!

Here is a copy of my slides, which were just to put a little structured content into three hours of discussion moderated by my CAISJA hosts.

As promised to attendees, here is the Hicks Morley paper (written in 2005) on student appeals and here are some citations to recent and relevant case law.

  • Cotton v. College of Nurses of Ontario – On administrative fairness and mandatory medical assessments. See here for my case summary.
  • Zeliony v. Red River College – On hearing transcripts and the requirement to give reasons. The College’s reliance on unsworn witness statements (in part because witnesses said they were afraid to testify) is an important issue that is not addressed head-on in this award.
  • Lerew v. St. Lawrence College – On hearing transcripts and the requirement to give reasons.
  • F.H. v. McDougall – The Supreme Court of Canada on the existence of only one standard of proof in civil cases – the balance of probabilities standard.

Though it is technically neither an academic integrity nor a student judicial affairs issue, we did get into discussion on threat assessments, student privacy and non-disciplinary suspensions. Some materials on this topic are posted here (my CAUBO March 2008 presentation), here (comments made after the Kajouji case) and here (link to good podcast).

Thanks again to my CAISJA hosts. I hope this material is helpful and, for those who attended, look forward to keeping in touch!

Case Report – Raitt “lost recorder” judgement published

The Nova Scotia Supreme Court has published Moir J.’s decision on the lost digital recorder containing embarrassing comments made by Minister of Natural Resources Lisa Raitt. I was quoted by the National Post here, but really didn’t have much to say at the time. This is no criticism of the conclusion embodied in Moir J’s cursory (oral) judgement, but now that I’ve read it I confess to still having more questions than answers!

The scenario is made for a law school exam:

  • Conversation between MacDonnell and Raitt, Raitt a public figure
  • Recording made unknowingly and in presence of limousine driver
  • Recorder misplaced by MacDonnell in a bathroom
  • Recorder found and passed to reporter
  • Reporter contacts MacDonnell to advise of finding
  • MacDonnell says she’ll pick the recorder up, but doesn’t
  • Time passes
  • MacDonnell misplaces Ministry’s confidential documents and resigns
  • Raitt comes under scrutiny
  • Reporter listens to recording in the name of the public interest
  • Reporter gives notice of intent to publish recording

Ms. MacDonnell relied on a privacy and property based claim. Moir J. held that she had not established a case sufficient to restrain publication. Here is the core of his oral judgement:

I agree with the submission for the Herald that the recorded conversation was not private because some or all of it was heard by a department driver…

Here is where I see the restriction on prior restraint having some place in laws of invasion of privacy, if such a tort is to emerge. It is wrong to deprive the press, and the public it serves, of remarks made privately, but not confidentially in the sense of trade secrets or privileged communications, after those remarks became available because of poor record keeping or management.

Bailment and conversion are torts applicable to personal property rights. The digital recorder was personal property. There is no bailment, and can be no conversion, of pure information. Information is protected as intellectual property.

Here are my questions. Wasn’t the driver bound to secrecy? Was this fatal to the expectation of privacy claim? When should poor record keeping constitute abandonment? How critical was Ms. MacDonnell’s failure to pick up the recorder as planned? Did she tell the reporter not to listen? Would that have made a difference? Did the information at issue and the public’s interest in receiving it weigh in the balance? If so, to what extent. You can start to see how the parameters of a privacy claim are very complex.

Two other points. One, the judgement creates a hierarchy of concepts: privacy seems less important than privilege and trade secret protection. I recently blogged about the Daniel Potter case here. It does the same thing. Two, whether the property torts can be used to re-gain control of information is a big issue for employers. I’ve blogged about it here.

MacDonnell v. Halifax Herald Ltd., 2009 NSSC 187.

Today’s “e-mail law” presentation

I was at the Osgoode PDP Electronic Evidence seminar today. There were great presentations all around, and I’ve included my notes at this Twitter feed. I was very honoured to co-present with John Gregory, whose knowledge of electronic evidence issues is deep. Our presentation is really about the law of e-mail, with a mix of content on access to e-mail on corporate systems, e-mail production and e-mail admissibility and weight. Here are the slides.

We also provided a handout with case citations and a summary sheet on the CGSB Standard on Electronic Records as Documentary Evidence.

I hope this is useful!

When employees use business systems to communicate with their lawyers

I just read Universal Sales, Limited v. Edinburgh Assurance Co. Ltd., a November 2008 judgement of the Federal Court that deals with inadvertent disclosure of solicitor-client communications.

The case is about a transcript of a telephone conversation containing solicitor-client communications that was inadvertently produced to an opponent in litigation. The judgement has a nice summary of the law on inadvertent disclosure of privileged information:

As the Plaintiffs point out, the mere physical loss of custody of a privileged document does not automatically end privilege, especially in the context of modern litigation where large quantities of documents, such as the electronic production of a CD in this case, are exchanged between counsel and accidental disclosure is bound to occur from time to time.

In cases of inadvertent disclosure, the waiver question turns more on the conduct of the privilege holder after it discovers its disclosure and also on any special prejudice that might be faced by the recipient (e.g. by bona fide reliance that does not conflict with any professional duty to immediately seal the communication).

I found Universal Sales in preparing to make some comments on whether employees waive privilege when they communicate with their solicitors on employer e-mail systems at today’s Osgoode PDP program on electronic evidence. The question is whether the waiver is intentional as opposed to inadvertent and will turn on the facts. The most authoritative Canadian case on the issue is the Daniel Potter decision by Mr. Justice Scanlan of the Nova Scotia Supreme Court.

Scanlan J. found that the CEO of a company had not waived privilege by sending solicitor-client communications through his employer’s computer system. He did consider argument based on the employee privacy cases (see my last post), but held that solicitor-client communications deserve special treatment. He also noted, however, that Mr. Potter was CEO and had “day to day executive control over policies which may have threated his expectation of privacy.”

My view on the issue is (1) that Daniel Potter does not close the debate, (2) that Canadian courts will demand very special facts to find waiver because they are staunch defenders of solicitor-client privilege and (3) the occasions when it makes tactical sense to engage in a dispute over the waiver issue are likely rare.

Looking forward to speaking to this later this morning. I’ll live blog the event at #oseev and @michaluk_live.

See ya!

OBA’s “Hot Issues” seminar and employee computer monitoring

I delivered a presentation at the OBA’s “Hot Issues in Privacy Law” seminar this morning called “Employee Computer Monitoring: Wither the most certain management right of all?” Here are the slides:

I prepared a paper for the presentation that I’m trying to re-purpose, and am going to hold off on publishing it for now. I hope I can make it available in one form or another soon. [Addendum: Here’s a copy of my speaking notes, which contain some of the key ideas.]

I enjoyed attending the entire session. The issues kept coming back to data security, which makes sense given the costs and risks of data breaches. Coincidentally, I had a call right after I returned to the office on a breach. For what it’s worth, I don’t find a discussion of costs and risks very helpful in guiding clients through the decision making exercise. Instead, I guide them to make decisions with a view to writing the story that they can cling to however all the external (and uncontrollable) factors play out. But even if I play my role to its best, it still can leave clients with some agonizing decisions. So if there’s one thing I can echo from today’s seminar, investing in prevention is a great idea. Data breaches suck!

You can read what are essentially a copy of my notes for the morning here. Remember to read from the bottom up.

Enjoy!